Thread (15 messages) read the whole thread 15 messages, 5 authors, 2008-01-10

Re: Linux IPv6 DAD not full conform to RFC 4862 ?

From: David Miller <davem@davemloft.net>
Date: 2008-01-09 23:32:13

From: Karsten Keil <redacted>
Date: Wed, 9 Jan 2008 16:36:56 +0100
   If the address is a link-local address formed from an interface
   identifier based on the hardware address, which is supposed to be
   uniquely assigned (e.g., EUI-64 for an Ethernet interface), IP
   operation on the interface SHOULD be disabled.  By disabling IP
   operation, the node will then:

   -  not send any IP packets from the interface,

   -  silently drop any IP packets received on the interface, and

   -  not forward any IP packets to the interface (when acting as a
      router or processing a packet with a Routing header).
I question any RFC mandate that shuts down IP communication on a node
because of packets received from remote systems.

If the TAHI test can trigger this, so can a compromised system on your
network and won't that be fun? :-)
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help